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22 April 2019 
Dear Keir, 


Equally Safe: A consultation on legislation to improve forensic medical 
services for victims of rape and sexual assault 


The Information Commissioner's Office (ICO) welcomes the Scottish Government’s 
consultation on proposals to clarify the responsibility for forensic medical services for 
victims of rape and sexual assault in legislation. 


The ICO has responsibility for, amongst other things, promoting and enforcing the 
EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 
(DPA 2018). The ICO is independent of government and upholds information rights 
in the public interest, promoting openness by public bodies and data privacy for 
individuals. The ICO does this by providing guidance to individuals and 
organisations, solving problems where we can, and taking appropriate action where 
the law is broken. 


Data protection legislation protects individuals’ personal data rights. When personal 
data is lost, stolen or shared or used inappropriately it can lead to harm, distress 
and negative impacts on personal rights and freedoms. 


The Scottish Crime and Justice Survey 2017/18 found that only 23% of victims had 
reported forced sexual intercourse to the police and that the most common reason 
for not reporting was the fear of making the situation worset. Getting data protection 
right at the legislative design stage will help ensure that victims’ personal data and 
ECHR Article 8 rights are protected and that victims experience no further trauma as 
a result of weak data protection practices. It will also ensure that third party’s data 
rights are upheld. 


1 https://www.gov.scot/publications/scottish-crime-justice-survey-2017-18-main-findings/ 
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ICO. 


Information Commissioner's Office 


The Bill Team has formally engaged with the ICO under Article 36(4) of the GDPR 
which requires that the Scottish Government to consult with the ICO when 
developing proposals for legislation to be passed by the Scottish Parliament relating 
to the processing of personal data. 


We welcome the considerations on data protection already taken by the bill team 
and we look forward to formal engagement under Article 36 (4) as the proposals 
develop. We will provide our detailed feedback on data protection considerations 
directly to the Bill Team as part of this process. 


The Bill Team should be aware that the ICO is also engaging with the Chief Medical 
Officer's (CMO) Taskforce for the improvement of services for adults and children 
who have experienced rape and sexual assault on current practice. 


Should the Scottish Government require clarification of any of the points made, 
please contact us on 0303 123 1115 or by email at scotland@ico.org.uk. 


Yours sincerely 


Dr Ken Macdonald 
Head of ICO Regions 
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